[DRAFT] Node: Governor token list automated updates

[djb15]

Alright so this change could theoretically create a PR that has the following body (i.e. where you're reading this now):

Tokens before = 1048
Tokens after = 1048

Tokens added = 0:

[]

Tokens removed = 0:

[]

Tokens with significant price changes (>30%) = 0:

[]

HOWEVER, as detailed here we'd need to give Github Actions permissions to do this in the UI; the permissions specified in the workflow file aren't sufficient.

Options:

1. Tick the checkbox to give Github Actions this permission. This is overly permissive compared to what I would like.
2. Email the above body to myself or the WH security contributors to manually create the PR. We can still push the changes to a branch, we'd just need someone to come open the PR in the UI and paste the above in the PR body. We'd need to create a couple of GH secrets for some of the email action arguments.

Would be good to get another opinion on which route we should go down. Tradeoffs boil down to effort vs permissiveness so I'd tend to lean towards #2 out of an abundance of caution.